Privacy Policy

Overview

Cee By Design ("we," "our," or "us") operates the website ceebydesign.com. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and booking services.

Information We Collect

When you book a studio session, we collect the following information:

• Name — First and last name, used to identify your booking.
• Email address — Used to send booking confirmations, cancellation notices, and communicate about your session.
• Phone number — Used to contact you regarding your booking if needed.
• Government-issued photo ID — Uploaded during booking for identity verification purposes. Stored securely on our servers with restricted access.
• Payment information — Credit/debit card details are processed securely by Stripe. We do not store, access, or have visibility into your full card number.

How We Use Your Information

• To process and confirm your studio booking.
• To send booking confirmations, cancellation notices, and refund notifications via email.
• To verify your identity using the photo ID you provide.
• To contact you about your upcoming session if necessary.
• To process payments and issue refunds through Stripe.

We do not use your information for marketing purposes unless you explicitly opt in. We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Third-Party Services

We use the following third-party services to operate our booking system:

• Stripe — Payment processing. Stripe's privacy policy: stripe.com/privacy
• Supabase — Database hosting and authentication. Your booking data is stored securely on Supabase's infrastructure.
• Resend — Email delivery service for booking confirmations and notifications.
• Vercel — Website hosting.

Each of these services has their own privacy policies governing their handling of your data.

Photo ID Handling

Your government-issued photo ID is uploaded during the booking process and stored securely on our servers using encrypted cloud storage with restricted access. Only authenticated studio administrators can view your ID image.

ID images are deleted from our servers within 7 days of your completed session. If you would like your ID deleted sooner, please contact us and we will remove it promptly.

Data Security

We take reasonable measures to protect your personal information, including:

• All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
• Payment data is handled exclusively by Stripe and never touches our servers.
• Access to booking records is restricted to authenticated studio administrators.
• Our database uses row-level security policies to prevent unauthorized data access.

Data Retention

We retain your booking information for as long as necessary to fulfill the purposes described in this policy, including maintaining records for accounting and legal compliance. If you would like your data deleted, please contact us at the email below.

Your Rights

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Withdraw consent for data processing where applicable.

To exercise any of these rights, please contact us using the information below.

Cookies

Our website uses essential cookies for authentication and session management. These are necessary for the website to function and cannot be disabled. We do not use tracking or advertising cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Cee By Design
61 Endicott Street, Building 25, Suite 241
Norwood, MA 02062
info@ceebydesign.com